cURL / Mailing Lists / curl-library / Single Mail


weak cipher suites with OpenSSL, SecureTransport and... ?

From: Daniel Stenberg <>
Date: Thu, 9 Jan 2014 23:34:19 +0100 (CET)


Here are two fresh (and annoying) issues we need to fix:

#1323 - remove export cipher suites from OpenSSL preference list

#1324 - curl built with SecureTransport includes support for NULL ciphersuites
         in ClientHello

Left to do is then to build curl with other TLS backends and try it against to see if there are more flaws in this

List admin:
Received on 2014-01-09